fix (csp): csp policy on cat
fix (csp): csp policy on cat

The issue this is fixing is for the plg_opener_htmlframe which does
open html documents as an iframe. Without this, we couldn't load any
js at all which was causing issue to render things like markdown via
external libs and such

mickael-kerjean/nuage,mickael-kerjean/nuage,mickael-kerjean/nuage,mickael-kerjean/nuage,mickael-kerjean/nuage,mickael-kerjean/nuage